Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35302e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e35302e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          jEkpblpsvRDa3CABBbB9bEhPUyveqgTNKKI62X+pfV4=
Subject key identifier:   10:03:27:6E:1F:A9:72:C2:C4:3C:B0:59:43:F0:52:07:2D:5F:EB:50
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       68B9D54721FF55ECDE9436CAFCB1B567799CA51D
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35302e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 17:47:01 +0000
ROA not before:           Fri 30 Aug 2024 17:42:01 +0000
ROA not after:            Fri 29 Aug 2025 17:47:01 +0000
asID:                     272710
IP address blocks:        201.23.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 07:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b9:d5:47:21:ff:55:ec:de:94:36:ca:fc:b1:b5:67:79:9c:a5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 17:42:01 2024 GMT
            Not After : Aug 29 17:47:01 2025 GMT
        Subject: CN=1003276E1FA972C2C43CB05943F052072D5FEB50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:07:c9:bb:fa:f7:81:da:41:7f:13:fb:bd:9c:
                    3f:4f:c1:55:c0:06:bf:4f:a0:ca:06:c9:3c:2d:b4:
                    ee:25:07:b6:b9:99:42:c7:3b:17:fc:fb:c4:57:52:
                    49:2b:ad:18:cb:b0:08:8a:93:1b:55:28:2b:bb:18:
                    22:e8:46:26:95:92:05:36:a2:bb:14:92:04:8e:e2:
                    a9:ad:e2:c7:3e:9b:34:55:3e:71:20:e7:7a:78:d5:
                    24:8e:43:7b:6a:47:50:1a:2f:b7:6f:ca:6f:86:60:
                    ae:fe:11:e9:ac:f2:99:60:0e:2e:8b:cc:bc:c7:ef:
                    b1:76:77:23:0d:f1:44:0d:3b:7c:dc:7d:b3:3c:cb:
                    72:62:56:cd:12:9b:02:fd:8d:15:3b:8f:82:e0:3a:
                    30:cc:9d:42:c7:76:66:6a:08:21:55:a4:36:62:3f:
                    2b:f5:0b:7c:49:07:a5:d9:c4:fb:57:2d:16:a7:4a:
                    f9:4e:b8:c8:b7:ad:5a:1f:96:35:ee:8b:13:b2:a8:
                    57:cb:69:93:e0:e5:72:6f:70:4c:8c:dd:d0:c8:e3:
                    35:c1:97:4e:b6:09:ce:48:03:67:f2:5c:7e:b3:bd:
                    0f:51:a0:a0:59:c7:7e:e8:08:2f:c5:c3:3d:1d:a0:
                    51:b2:7a:3f:4a:b3:be:6f:2f:cb:d3:cc:1b:9b:07:
                    bf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:03:27:6E:1F:A9:72:C2:C4:3C:B0:59:43:F0:52:07:2D:5F:EB:50
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35302e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:92:6e:86:32:67:0e:de:9b:86:70:c5:db:bf:1b:7d:40:5e:
         07:30:74:a9:10:81:b4:f3:11:a2:30:b6:53:5c:6a:ba:6c:5a:
         dd:b5:94:b3:61:37:78:bf:6d:52:c2:e9:87:07:6f:2e:94:01:
         d4:82:14:b4:78:8e:37:e6:5f:59:ad:96:85:a5:a5:db:0c:e4:
         41:ad:39:e8:8d:dc:ff:35:3e:f9:ac:50:53:9f:31:c6:f3:9a:
         1d:09:fa:54:15:e7:26:83:22:b5:96:0f:8f:d8:92:57:0b:00:
         ac:fc:11:bf:c5:1c:1c:46:35:cf:df:fa:87:ea:40:fc:f4:c5:
         cb:0d:29:83:67:60:92:a5:00:71:9c:e3:0c:70:46:02:85:f0:
         cc:8b:cd:7a:18:7b:e8:2b:90:2e:82:54:19:85:55:61:36:66:
         60:5d:c2:c9:5f:a5:74:ba:68:c5:39:01:29:dd:0c:47:2b:39:
         73:67:12:b8:70:67:49:5d:d4:ee:65:83:ac:d4:b9:04:21:77:
         a7:ff:a0:32:74:04:61:fc:ba:04:f2:37:26:76:00:84:8f:30:
         17:65:d1:fb:58:0a:21:1a:3e:39:5d:4a:a9:d9:67:6a:60:7c:
         aa:ca:c1:03:01:b0:50:ea:71:1c:4e:f2:1e:43:3c:9f:db:3b:
         1e:b3:a2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:10 2025 by rpki-client on console.sobornost.net